Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
File: A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json)
Hash identifier: WfW+vkNHx5Z5R0Ok9xXNvD3AxFCGKIUX+l7oAWLpQus=
Subject key identifier: F3:DB:71:16:F7:AE:99:0D:F2:28:A0:9D:80:94:EC:57:FE:EC:95:70
Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Certificate issuer: /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Certificate serial: 019CB0FFC22C669455CCF53C3E2C21739A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
Manifest number: 04CA
Signing time: Tue 03 Mar 2026 00:01:17 +0000
Manifest this update: Tue 03 Mar 2026 00:01:17 +0000
Manifest next update: Wed 04 Mar 2026 00:01:17 +0000
Files and hashes: 1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: 71HGfoSPS+H22GYh+DGLScHgt/rHQkMzoTfV0dh+N5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:ff:c2:2c:66:94:55:cc:f5:3c:3e:2c:21:73:9a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Validity
Not Before: Mar 3 00:01:17 2026 GMT
Not After : Mar 4 00:01:17 2026 GMT
Subject: CN=f3db7116f7ae990df228a09d8094ec57feec9570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:52:57:25:d7:1e:70:da:a1:e9:75:95:92:
64:cd:11:e1:6b:7a:5e:b2:ae:fc:81:8a:03:b9:6c:
58:9e:a9:bf:ed:57:36:4c:61:c3:d2:ce:d5:72:76:
55:67:1f:e4:e3:f1:d4:be:f5:bc:4e:0d:95:59:3e:
80:32:74:47:16:51:ff:00:15:a2:f0:64:52:30:3e:
d3:f4:11:d4:8e:27:9c:dc:e8:cc:66:0c:13:70:03:
51:6f:4d:6b:ef:91:96:b6:12:3f:dd:0c:27:47:2a:
7b:18:ed:91:f3:d5:9e:11:0a:02:49:28:a9:20:db:
d4:cc:40:b2:82:fe:25:b0:ff:28:46:15:df:b2:1c:
e4:11:aa:ae:9c:f1:5c:c9:b6:18:18:8f:77:0c:07:
c8:1e:bf:5d:ad:e8:03:ca:b4:f9:ee:80:c6:36:80:
ec:08:3e:61:f4:b3:29:ca:4f:b0:4c:69:c1:33:bd:
88:5d:52:cf:7a:d7:9f:2c:fc:5d:ce:5d:74:90:21:
6d:4d:73:d5:94:dc:97:7b:89:65:10:9d:f1:1f:31:
fe:f1:6a:de:7a:e8:44:db:e4:db:99:66:79:d4:cb:
ad:22:fa:28:fb:aa:8a:85:29:60:dd:2d:3a:e1:09:
c7:bd:96:72:bd:dd:71:d8:7c:6d:19:ce:4c:24:36:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DB:71:16:F7:AE:99:0D:F2:28:A0:9D:80:94:EC:57:FE:EC:95:70
X509v3 Authority Key Identifier:
keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:65:d1:53:6e:28:0f:f3:36:43:12:e6:cc:bc:1a:30:e9:26:
ba:f4:c0:0a:4f:cc:21:57:ca:0c:d1:2f:2b:95:db:ef:89:04:
6e:a1:7c:20:3c:60:bd:19:89:9b:e3:ff:06:76:c2:8e:7c:f5:
48:6b:ff:c8:9c:6f:2e:8b:a6:95:ca:2d:91:15:2d:fe:4f:2e:
38:2c:70:58:fa:1e:e1:a7:11:0d:f6:63:d8:6d:e9:f0:4b:8f:
42:62:12:fe:5d:07:c4:28:41:90:93:42:51:f8:a7:bd:33:9e:
61:6c:34:73:a2:ce:10:39:7c:9c:a4:58:f0:2d:e0:97:63:45:
e8:ff:fd:a7:35:98:45:63:dc:80:29:a6:74:b8:4a:8f:e8:aa:
5f:de:2d:35:52:5c:f3:a1:02:91:43:c4:db:7a:fb:ab:d5:15:
ee:60:b2:ab:17:14:54:c4:4f:78:66:4a:d0:a9:0e:1c:2e:79:
2b:9f:50:0f:00:01:b8:98:29:55:59:ea:d5:90:91:17:d0:85:
80:69:8d:b9:8c:74:86:db:88:b4:eb:e5:91:47:08:77:25:26:
b2:41:7f:52:95:89:f3:20:23:eb:63:f6:38:13:e2:70:f9:0a:
3c:1d:24:46:5e:3c:05:4b:e6:5e:a2:e5:b5:2f:70:fc:b0:7d:
2d:99:f6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:38:39 2026 by rpki-client